NOD32 users in 'ere sharpish please

MarcLister · 14 Dec 2008 at 15:34

Trying to download the latest version of Notepad++ 5.1.2 from FileHippo. However NOD32 tells me that the exe for Notepad++ 5.1.2 contains "Win32/Adware.Cinmus application". So I tried downloading from the SourceForge site linked to the official Notepad++ site. Same thing.

I've had a chat with jbloggs who has tested the files with Kaspersky and AVG and says they both report nothing. So I was wondering if any NOD32 users could try http://www.filehippo.com/download_notepad/ and/or https://sourceforge.net/project/showfiles.php?group_id=95717&package_id=102072 and see what their copy of NOD32 says.

Currently running NOD32 3.0.672.0 and virus database 3689 if that helps anyone else.

Brian Stuart · 14 Dec 2008 at 15:42

Just tried that with Eset Security Suite and got a warning the same as yours. Plus locked up my desktop.

MarcLister · 14 Dec 2008 at 15:52

You got the same virus database? 3689? It updated to that this morning when I turned PC on so I think its the latest version that is causing this false positive.

Going to the NOD32 forums to see if anyone has the same problem.

Thanks for your response.

Brian Stuart · 14 Dec 2008 at 15:54

Yes, the database is 3689

MarcLister · 14 Dec 2008 at 15:57

Oooh we have a result!

http://www.wilderssecurity.com/showthread.php?t=227850
http://www.wilderssecurity.com/showthread.php?t=227849

Looks like it could be Nullsoft installer causing the problem. Or should I say provoking the false positive. And fixed in 3690 apparently? Just got that. Will test Notepad++ now.

Richdog · 14 Dec 2008 at 15:58

Just disable NOD32, download it, and scan it using an online scanner. It could well be a false positive.

Ok I just scanned it with NOD32 with the latest database and it detected nothing amiss...

MarcLister · 14 Dec 2008 at 15:59

It is a false positive.

You on database 3690?

NOD32 not picking anything up now.

Richdog · 14 Dec 2008 at 16:01

Yup 3690, it's all good.